API - CVE CyberSecurity Database News (Page 22)

Dec 9, 2024 API Exploit Apache

CVE-2024-53949: Uncovering an Improper Authorization Vulnerability in Apache Superset with FAB_ADD_SECURITY_API Enabled

Apache Superset is a popular open-source data visualization and business intelligence platform for exploring and visualizing large datasets with ease. However, an Improper Authorization vulnerability

Dec 9, 2024 API Exploit

CVE-2023-49818: Missing Authorization Vulnerability in Webflow Pages Allows Exploiting Incorrectly Configured Access Control Security Levels

As an effective and popular web design platform, Webflow empowers users to create responsive websites without any actual coding. However, security vulnerabilities are inevitable in

CVE-2023-49194 - Insertion of Sensitive Information Into Debugging Code Vulnerability in Importify (Dropshipping WooCommerce) Allows Retrieve Embedded Sensitive Data

Dec 9, 2024 API Exploit

CVE-2023-49194 - Insertion of Sensitive Information Into Debugging Code Vulnerability in Importify (Dropshipping WooCommerce) Allows Retrieve Embedded Sensitive Data

A recently discovered vulnerability CVE-2023-49194 has been identified in the Importify (Dropshipping WooCommerce) plugin. It affects versions from N/A through 1..4. This vulnerability

Dec 9, 2024 API Exploit

CVE-2023-48277 - Missing Authorization Vulnerability in SuperPWA Super Progressive Web Apps Exploiting Incorrectly Configured Access Control Security Levels

A critical missing authorization vulnerability has been discovered in Super Progressive Web Apps (SuperPWA), affecting versions n/a through 2.2.21. This vulnerability allows

Dec 9, 2024 WordPress API Exploit

CVE-2023-47763 - Missing Authorization Vulnerability in Martin Gibson WP Custom Admin Interface: Exploit Details & Mitigation Steps

A new vulnerability has been discovered within the Martin Gibson WP Custom Admin Interface plugin, which is widely used by WordPress website administrators to customize